Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: 6HPat+1wXETpw6Q+pI0TcOlnSPP63tUuR95i3YVJpw0=
Subject key identifier: A5:E2:E9:F3:A9:68:13:E9:BB:63:A6:2E:48:87:40:66:56:35:B4:1A
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 0199FD3462C191600A5856C3ED53A247A466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 0DFF
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: Vbat/AvlnlmdCPMPv1oTbFMSmvTmSIDDqsGCb6E5HLE=)
2: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (hash: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:62:c1:91:60:0a:58:56:c3:ed:53:a2:47:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=a5e2e9f3a96813e9bb63a62e488740665635b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:ed:45:9b:e1:60:d4:14:e9:e2:09:af:b8:
a0:c2:64:9e:b1:de:49:fe:11:3c:bf:3e:91:35:89:
40:29:78:78:f6:d0:3d:59:c4:af:e9:b9:5f:75:a5:
1a:54:e5:40:f6:ab:90:9d:aa:03:e9:bb:4b:d0:f2:
7c:bd:d1:d5:41:6d:36:5c:39:95:1a:72:3e:d1:10:
26:96:b8:27:e0:26:21:31:be:89:1f:2d:96:0a:d6:
26:4f:dd:51:d8:8b:53:ea:27:8d:28:38:c2:f5:00:
b4:50:04:eb:53:27:ff:26:dc:99:57:83:8e:e8:a0:
fc:90:5a:8b:c8:04:c7:f9:59:0e:c4:ca:9c:8b:ec:
c7:62:bd:87:27:13:8a:18:2a:c0:c6:d5:4d:bc:22:
ad:c0:88:6d:b6:b5:b2:c3:89:1d:83:48:8f:11:da:
47:95:ab:5d:dc:d8:90:e1:e9:c5:9f:1b:3d:ce:ff:
c7:d1:f7:f8:79:bb:a1:41:77:42:dc:92:e9:1d:10:
b6:e8:6b:58:75:d8:7c:81:fd:80:af:7c:23:ab:b5:
5d:ad:d5:33:ca:c3:23:12:67:56:fd:d0:86:ff:56:
c5:30:3a:24:ac:dc:b6:89:d8:b3:15:c9:5f:e3:db:
23:fd:f3:d7:4b:26:2c:6e:52:9c:9f:18:6b:75:c1:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:E9:F3:A9:68:13:E9:BB:63:A6:2E:48:87:40:66:56:35:B4:1A
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:19:7d:88:b8:23:95:fc:a7:b7:9a:3f:cd:20:10:48:af:12:
7b:c2:54:a1:8f:2f:c0:c0:6a:a7:cd:43:29:5c:5d:11:ee:7a:
a1:0a:05:6d:d4:69:13:3c:8d:e2:27:5f:82:5e:66:3d:78:3f:
f7:45:6b:1b:c1:00:4c:45:05:13:19:e9:90:6a:c2:7c:bd:8a:
a1:01:1e:a0:37:8e:1e:73:71:73:56:74:77:96:6c:45:3d:39:
66:a4:42:60:36:67:6a:70:d1:3c:e2:28:4c:73:d4:cf:72:d2:
62:db:e8:00:1a:eb:ab:9a:cf:55:d5:c6:6f:47:ca:90:74:11:
ce:9e:50:ec:77:2e:72:81:fa:aa:55:ae:17:e1:97:57:57:41:
e2:c2:74:ad:36:57:56:52:38:a0:dd:b4:f5:06:b7:16:63:33:
e3:02:85:3f:3f:8f:af:70:e5:52:d1:b2:c8:23:71:33:45:33:
d3:99:d0:2a:e7:5b:93:f3:00:fa:69:94:e7:a9:01:5e:47:85:
54:87:bf:54:1e:d7:ab:02:4a:66:ad:01:e9:df:57:33:21:47:
22:f3:26:d0:ca:05:64:43:15:34:93:b7:d5:99:3f:b7:b5:73:
c0:c2:b1:ea:a5:02:3d:ac:e4:1a:89:e4:f5:cc:02:fd:a7:ff:
b3:f0:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:26 2025 by rpki-client